On Fri, 13 Feb 2015 23:23, d...@fifthhorseman.net said: > Encouraging this kind of use seems risky. I certainly wouldn't want to > do it without being able to have gpg-agent prompt me on my local machine > for each use of the key. Its current silent operation once the
Similar as with smartcards this feature protect against key compromise but not against misuse of the key. > Could gpg-agent have a setting (per-key? per-agent?) that would have it > use pinentry for prompting? Good idea. We can disable the cache in this case by default and allow it only by option - either for all keys or (with a bit more code) for a selected set of keys. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users